Get purl url from maven dependency

**What would you like to be added**:

I use syft to create a sbom.xml to import in dependency-track.

The sbom.xml is create from a java maven project. There are maven dependenies inlcuded like:

`
org.springframework.security
spring-security-core
5.5.2
`

As I understand from debugging the source is that to create a purl url I need a pom.properties or pom.xml in the jar file of spring-security-core.

But there is no pom.properties or pom.xml in the spring-security-core.jar from maven central.

Is there a way to create the purl url via syft anyway ?

Thanks for your help.

Best regards
Sascha Vujevic

**Why is this needed**:

I would like to see vulnerabilities in dependency track of all dependencies used in my maven project.

**Additional context**:

Start by reproducing the spring-security-core 5.5.2 case and inspect the generated sbom.xml when the JAR lacks pom.properties and pom.xml. Trace how Maven coordinates are obtained and converted to a purl; done means the dependency receives a valid purl without either embedded file.

Written by the indexing model from the issue text.